Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KPAx1aov9USGjjbgMObnQzyxmkM.roa
File: KPAx1aov9USGjjbgMObnQzyxmkM.roa (raw, json)
Hash identifier: UPnPXaCu5pBSvFqKJuEipq1AYCiHdgCvicSL2e4T6ng=
Subject key identifier: 28:F0:31:D5:AA:2F:F5:44:86:8E:36:E0:30:E6:E7:43:3C:B1:9A:43
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019E22772FC3D580363493938FC238AC5BF9
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KPAx1aov9USGjjbgMObnQzyxmkM.roa
Signing time: Wed 13 May 2026 17:51:36 +0000
ROA not before: Wed 13 May 2026 17:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214833
IP address blocks: 45.129.237.0/24 maxlen: 24
45.137.154.0/24 maxlen: 24
195.18.27.0/24 maxlen: 24
213.109.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:77:2f:c3:d5:80:36:34:93:93:8f:c2:38:ac:5b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: May 13 17:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28f031d5aa2ff544868e36e030e6e7433cb19a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:ba:d9:36:e7:75:0a:00:50:88:2e:bd:46:
5a:e7:0d:a1:66:45:90:82:61:75:08:42:c1:71:25:
fe:9e:90:fe:34:43:24:3c:f8:94:e9:dc:37:32:82:
5d:bf:5c:3a:48:28:ad:80:42:e6:ed:30:80:d2:f2:
a7:47:22:30:76:73:6f:4c:f6:f4:e1:97:52:da:5b:
3d:d2:27:a8:91:e5:60:ea:89:a0:9b:39:db:41:e6:
bf:a2:ab:3c:ee:2c:60:02:9a:a2:27:95:21:5d:c6:
8b:67:a1:d0:d6:26:cf:ba:17:e0:56:49:88:a2:cd:
55:3c:90:b7:a8:87:2e:02:de:6a:41:46:65:79:7c:
c5:71:8a:37:18:dd:9d:64:ee:71:fa:4c:ba:96:1b:
f7:20:1e:c0:54:8b:15:c2:0d:e9:ff:c7:ac:12:58:
6f:8c:0d:96:fa:8d:44:54:c5:16:81:1a:63:8c:a8:
68:3e:55:7e:e3:f5:de:a4:03:9d:10:2a:a5:ec:f8:
2c:72:40:91:0b:cc:b8:45:c1:74:1d:00:8c:6d:39:
af:88:75:ac:74:75:f3:3e:55:74:bd:4d:e3:bc:8b:
d4:c5:c2:25:4d:f0:c4:fc:38:d7:27:bc:96:ac:45:
8e:61:43:cc:13:d5:a1:32:e0:c5:08:8c:8e:cc:5b:
cc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:31:D5:AA:2F:F5:44:86:8E:36:E0:30:E6:E7:43:3C:B1:9A:43
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/KPAx1aov9USGjjbgMObnQzyxmkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.237.0/24
45.137.154.0/24
195.18.27.0/24
213.109.97.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f2:44:19:d0:46:15:1a:f3:b3:d1:14:ac:09:b3:f9:82:42:
d8:94:5b:de:dd:5d:36:8b:dc:41:98:84:7f:dd:16:9f:de:61:
62:b6:bc:6d:97:0e:34:c8:12:25:6e:02:c9:75:4c:ba:c8:96:
37:0c:ba:92:a2:02:e1:d7:af:09:fe:67:e8:8b:9b:5f:71:64:
08:db:7c:f2:0b:53:89:17:94:ca:44:5e:38:d0:1c:95:dc:c3:
be:6f:0b:cb:37:c2:39:4c:fd:15:30:a3:92:4c:56:92:56:3b:
95:e9:9f:20:e5:d9:76:8b:6a:5b:13:c1:c0:e0:6a:8c:87:87:
84:bf:f2:52:b3:9e:cd:d2:6c:bf:17:ab:8b:ab:0f:4a:21:d8:
c6:0f:4e:f8:72:38:38:8b:54:98:a0:63:da:06:19:fd:5b:49:
92:e9:b2:df:da:de:de:33:0d:4e:19:3b:e7:68:f5:0b:42:a7:
93:23:65:38:7b:46:56:ee:a8:ea:4a:fa:02:cb:f6:8d:a3:d2:
85:6b:d5:b9:71:23:04:58:b9:90:76:8e:2a:33:2a:4a:93:66:
84:ad:68:b9:50:a6:ee:2a:3f:c8:93:1e:bc:36:57:c9:b0:63:
2d:11:b7:c4:eb:3c:b7:9a:55:b7:e7:f4:ab:b0:f9:ad:97:6d:
bc:6d:c5:a3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ4idy/D1YA2NJOTj8I4rFv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjYwNTEzMTc1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOGYwMzFkNWFhMmZmNTQ0ODY4ZTM2ZTAzMGU2ZTc0MzNjYjE5YTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY+62TbndQoAUIguvUZa5w2hZkWQ
gmF1CELBcSX+npD+NEMkPPiU6dw3MoJdv1w6SCitgELm7TCA0vKnRyIwdnNvTPb0
4ZdS2ls90ieokeVg6omgmznbQea/oqs87ixgApqiJ5UhXcaLZ6HQ1ibPuhfgVkmI
os1VPJC3qIcuAt5qQUZleXzFcYo3GN2dZO5x+ky6lhv3IB7AVIsVwg3p/8esElhv
jA2W+o1EVMUWgRpjjKhoPlV+4/XepAOdECql7PgsckCRC8y4RcF0HQCMbTmviHWs
dHXzPlV0vU3jvIvUxcIlTfDE/DjXJ7yWrEWOYUPME9WhMuDFCIyOzFvM4wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFCjwMdWqL/VEho424DDm50M8sZpDMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvS1BBeDFhb3Y5VVNHampiZ01PYm5Renl4bWtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYHtAwQA
LYmaAwQAwxIbAwQA1W1hMA0GCSqGSIb3DQEBCwUAA4IBAQAq8kQZ0EYVGvOz0RSs
CbP5gkLYlFve3V02i9xBmIR/3Raf3mFitrxtlw40yBIlbgLJdUy6yJY3DLqSogLh
168J/mfoi5tfcWQI23zyC1OJF5TKRF440ByV3MO+bwvLN8I5TP0VMKOSTFaSVjuV
6Z8g5dl2i2pbE8HA4GqMh4eEv/JSs57N0my/F6uLqw9KIdjGD074cjg4i1SYoGPa
Bhn9W0mS6bLf2t7eMw1OGTvnaPULQqeTI2U4e0ZW7qjqSvoCy/aNo9KFa9W5cSME
WLmQdo4qMypKk2aErWi5UKbuKj/Ikx68NlfJsGMtEbfE6zy3mlW35/SrsPmtl228
bcWj
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:03 2026 by rpki-client